ECCouncil 312-76 - EC-Council Disaster Recovery Professional v3 (EDRP)

An Incremental Backup only backs up files changed or added since the last backup (full or incremental), making it faster and less disruptive, ideal for Alan’s daily, small-volume needs.

Option B (Differential Backup):Backs up all changes since the last full backup, growing larger and slower over time.

Option C (Full System Backup):Copies everything, time-consuming and unnecessary here.

Option D (Online Data Backup):A method, not a type; could be any backup, but not specific.

“Incremental Backups minimize downtime by capturing only changes since the last backup, suitable for frequent, low-volume data updates” (Module: Data Backup and Recovery, Section: Backup Types).

Overall Program Governance in a BCP audit evaluates the plan’s alignment with resilience and continuity goals, including funding adequacy, ensuring it supports organizational objectives effectively.

Option A (Ongoing Program Management):Focuses on day-to-day execution, not funding review.

Option C (Management of Process Changes):Tracks updates, not resilience or funding.

Option D (Overall Testing of the Plan):Validates functionality, not governance.

“Overall Program Governance assesses BCP effectiveness, resilience promotion, and funding balance to ensure sustainable continuity” (Module: Business Continuity Planning, Section: BCP Audit Phases).

In virtualization (e.g., VMware, Hyper-V), deleting snapshots may not free space if dependent child disks (differencing disks) remain. Deleting these child disks consolidates space, resolving Remus’s issue.

Option B:Deleting the VM database risks data loss, not space recovery.

Option C (Uninstall Hypervisor):Drastic, loses all VMs.

Option D (Shutdown/Restart):Temporary, doesn’t free space.

“Deleting child disks of snapshots in VMs consolidates storage, freeing space when snapshot deletion alone is insufficient” (Module: Virtualization and Recovery, Section: Storage Management).

The Planning Phase of scenario training involves preparing participants, informing them in advance about the exercise, and setting objectives. Emma’s advance notification aligns with this phase.

Option A (Warning Phase):Not a standard training phase; implies immediate alerts.

Option B (Review Phase):Post-training analysis, not pre-informed.

Option D (Execution Phase):The actual conduct, not the preparation.

“The Planning Phase of scenario training ensures participants are informed and prepared in advance, establishing the foundation for effective execution” (Module: Training and Awareness, Section: Training Phases).

RAID 3 uses striping with a dedicated parity drive, meeting all requirements: parity for reconstruction, good speed (sequential access), and lower cost than RAID 10 or RAID 1 (fewer drives than RAID 10). Option C duplicates RAID 1, likely a typo.

Option A (RAID 10):Mirroring and striping, expensive, no parity drive.

Option B/C (RAID 1):Mirroring, no parity, costly for multiple drives.

Option D (RAID 3):Parity-based, cost-effective, meets all criteria.

“RAID 3 employs a dedicated parity drive for data reconstruction, offering good performance and cost-efficiency for backup solutions” (Module: Storage Technologies, Section: RAID Levels).

System Recovery is the process of restoring a system’s applications and data to a previous state within an acceptable timeframe, as described.

Option A (System Migration):Moving systems, not restoring.

Option B (System Backup):Creating copies, not restoration.

Option C (System Replication):Duplicating data, not recovery.

“System Recovery restores applications and data to a prior state within defined timeframes, ensuring operational continuity post-disaster” (Module: System Recovery, Section: Recovery Processes).

Business Impact Analysis (BIA) identifies critical resources, recovery order, and RTO/RPO, but assessing threat impact is part of risk assessment, not BIA’s primary objective.

Option B/C/D:Core BIA goals.

“BIA focuses on resource identification, recovery prioritization, and RTO/RPO, not direct threat impact assessment, which precedes it” (Module: Business Impact Analysis, Section: BIA Objectives).

Return on Risk Adjusted Capital (RORAC) is a financial metric often used to allocate funds for risk mitigation, including emergency reserves like James’ $20,000 for virtual connections. It reflects the return expected after accounting for risk costs.

Option A (RAROC):Similar, but typically broader, not specific to emergency funds.

Option B (RAPM):A management approach, not a fund term.

Option C (RARORAC):A variant, less commonly used in this context.

“RORAC quantifies funds set aside for risk scenarios, such as emergency recovery costs, ensuring financial preparedness aligns with risk exposure” (Module: Risk Management, Section: Financial Metrics).

Mission Essential Functions (MEF) are critical tasks an organization must maintain or quickly resume post-disruption to ensure continuity.

Option A (BIA):Identifies impacts, not tasks.

Option B (Mitigation):Reduces risks, not task-focused.

Option D (MAD):Downtime limit, not tasks.

“Mission Essential Functions (MEF) are vital tasks requiring continuous or rapid resumption to sustain operations post-incident” (Module: Business Continuity Planning, Section: MEF Definition).

Opportunity Cost is the value of the next best alternative forgone when choosing one option over others, directly matching the question’s definition.

Option A (BIA):Assesses disruption impacts, not alternatives.

Option C (Fixed Cost):A static expense, unrelated to choices.

Option D (Cost Benefit Analysis):Compares costs and benefits, not forgone gains.

“Opportunity Cost represents the potential benefit lost by choosing one recovery strategy over another, a key consideration in resource allocation” (Module: Risk Management, Section: Cost Analysis).